Integer overflow

Integer overflow in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform FTSP CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service service outage or RNADiagReceiver.exe daemon crash via UDP data th...

Code injection

LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service service outage via a zero-byte UDP packet that is not properly handled by Logger.dll...

CVE-2012-4695

CVE-2012-4695 affects Rockwell Automation RSLinx Enterprise CPR9 and CPR9-SR1 to CPR9-SR6. Vulnerability lies in LogReceiver.exe and Logger.dll, where a zero-byte UDP datagram (and related input handling) can trigger a DoS (service outage) remotely. The ICS-CERT advisory describes multiple input-...

CVE-2012-4714

Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9 through CPR9-SR6 contains an integer overflow in RNADiagnostics.dll that allows remote attackers to cause a DoS by sending UDP datagrams with large integers, potentially crashing RNADiagReceiver.exe. All affected versions should upgrad...

CVE-2012-4713

The CVE-2012-4713 entry concerns Rockwell Automation FactoryTalk Services Platform (RNADiagnostics.dll) with affected CPR9 through CPR9-SR6. The root cause is an integer signedness/input validation issue that allows remote attackers to trigger a DoS by sending UDP datagrams containing a negative ...

Design/Logic Flaw

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service service outage via a craft...

CVE-2012-0221

The CVE-2012-0221 entry affects Rockwell Automation’s FactoryTalk RNADiagReceiver service (CPR9 up to CPR9 SR5; RSLogix 5000 v17–20). A vulnerability in how the service handles the return value from an unspecified function can be triggered by a crafted UDP packet to RNADiagReceiver (port 4445), c...

CVE-2012-0222

CVE-2012-0222 affects Rockwell Automation’s FactoryTalk RNADiagReceiver (CPR9 up to SR5; RSLogix 5000 17–20). A remote attacker can induce a DoS via a crafted packet, triggering an out-of-bounds read in the RNADiagReceiver service (listening on UDP/Port 4445 per advisory updates). Connected docum...

CVE-2012-0222

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 allows remote attackers to cause a denial of service out-of-bounds read via a crafted packet...

CVE-2012-0221

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service service outage via a craft...